Sec. 306. Report on notification effectiveness
178 words·~1 min read·
/bill/113/s/1995/is/section-306·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Not later than 1 year after the date of enactment of this Act, and each year thereafter, the designated entity, in coordination with the Attorney General and the Federal Trade Commission, shall submit to the Committee on the Judiciary of the Senate and the Committee on the Judiciary of the House of Representatives a report regarding the effectiveness of post-breach notification practices by agencies and business entities. The report required under subsection
(a)shall include— in each instance of a breach of security, the amount of time between the instance of the breach and the discovery of the breach by the affected business entity; in each instance of a breach of security, the amount of time between the discovery of the breach by the affected business entity and the notification to the Federal Bureau of Investigation and the United States Secret Service; and in each instance of a breach of security, the amount of time between the discovery of the breach by the affected business entity and the notification to individuals whose sensitive personally identifiable information was compromised.